PRIVACY
Privacy Policy
How your data is handled when you browse, use the tools or contact Marco Pace.
Controller and contact
Marco Pace, owner and operator of marcopace.net, is the controller of personal data collected through this website. For information and personal-data requests: info@marcopace.net.
Data processed
The form requests your full name, email, subject and message; it records acknowledgement of this notice and uses technical data to prevent abuse. The enquiry is sent to the professional mailbox without storing the message in a website database. Browsing may generate ordinary hosting logs, such as IP address, date and time, requested resource and browser information. Do not send identity documents, case files, special-category data or unnecessary information about others in your first enquiry.
Purposes and legal bases
I use the data to answer enquiries and take pre-contractual steps requested by the individual (Article 6(1)(b) GDPR). General correspondence and website security rely on the legitimate interests of communicating with people who contact me and preventing abuse, subject to their rights (Article 6(1)(f)). Applicable legal duties rely on Article 6(1)(c). Acknowledging this notice is not marketing consent; the form does not subscribe you to a newsletter.
Providing data and using the AML tools
Required fields allow the enquiry to be handled and answered: the form cannot send without the necessary data. You may instead use the published email address. AML Check and Readiness Radar process selections in your browser; they make no automated legal decisions and do not certify compliance. The Check transfers context to the form only if you choose; you can edit or remove it before sending. No name or email is required to use the tools.
Who receives the data
Marco Pace handles commercial and privacy enquiries. Access is limited to authorised persons and necessary technical providers, particularly hosting, maintenance and email services, under their respective roles and confidentiality duties. Data may be disclosed to authorities or advisers where required by law or necessary to protect a legal right. It is not sold for third-party marketing.
Processing locations and transfers
Processing locations also depend on the hosting and email services used. Any transfer outside the European Economic Area requires a basis under Chapter V GDPR, such as an adequacy decision or appropriate safeguards. You can contact the controller for the actual technical recipients, processing countries and safeguards applicable to your enquiry.
Retention and erasure
Enquiries that do not lead to an engagement are retained while needed to answer and manage follow-up. Necessity is assessed by whether discussions remain open and whether legal duties or concrete needs to protect legal rights apply; once those reasons end, data is deleted or anonymised. Where an engagement follows, relevant data is handled under that relationship and applicable duties. Technical anti-abuse data is limited to abuse prevention; form tokens expire after 30 minutes and the cleanup script removes technical state older than two hours when it runs. Logs and backups follow service security and recovery needs: removal from active systems may require the normal backup replacement cycle, and backups must not be used to reactivate erased data.
Your rights
Where applicable, you may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. Email info@marcopace.net describing your request; identity checks are proportionate and do not automatically require an identity document. A response is due without undue delay and normally within one month. If a GDPR-permitted extension is necessary, its reasons and timing will be communicated within the first month. Legal duties or the protection of legal rights may limit erasure; the reasons will be explained.
Complaints
You may complain to a competent supervisory authority, particularly in the country of your habitual residence, work or alleged infringement. Contacting the controller does not limit this right.
Updates
Last updated: 29 October 2026. This notice covers browsing, initial enquiries and website tools. Any engagement or further processing is accompanied by the relevant specific information.